OBCORD LTD and Online Formula Racing

1. Controller and scope

OBCORD LTD is the data controller for the services covered by this policy. This policy applies to the OBCORD company website, the Online Formula Racing public website and portal, the OFR API, the OFR mobile applications, and the related Discord bot flow used to provision or manage access to OFR accounts.

The onlineformularacing.com address redirects to onlineformularacing.co.uk and is covered by the same policy. The images.onlineformularacing.co.uk host used for OFR media and image assets is also covered by this policy.

2. What we collect

We do not operate advertising tracking, analytics, payment processing, or social login providers for these services.

Depending on how you use the services, we may process the following categories of data:

• Account data such as your username, internal user ID, and the credentials needed to let you sign in.
• The only Discord profile information we collect is your Discord username. We also store your Discord user ID as a technical identifier so the bot can provision and link the correct OFR account; we do not collect your Discord messages, contacts, or other Discord profile information.
• Competition and service data such as league membership, race results, standings, reports, penalties, privileges, and related service activity you create or take part in.
• Technical and security data such as IP address, browser or device information, and server logs generated when you use the websites, API, or apps.
• Device token data used only when you enable mobile push notifications in the OFR mobile apps.
• Browser-stored local data on the OFR website, including theme preference, selected API target, access token, signed-in user details, selected league or division, and unfinished form drafts required for the portal to work properly.
• Embedded third-party media data when you load externally hosted evidence or media inside reports or related content.

3. How we use the data

We use the data above to run and secure the services, authenticate users, provision accounts, operate leagues and events, publish results and standings, manage reports and privileges, send service notifications you enable, and respond to support or privacy requests.

4. Lawful bases

We process personal data where it is necessary to provide the services you use, where it is necessary for our legitimate interests in operating, securing, and improving those services, and where it is necessary to comply with legal obligations. Where a feature depends on your choice, such as enabling push notifications on a device, we rely on that action and the related device permissions.

5. Sharing

We do not sell personal data. We do not use advertising networks, analytics platforms, payment providers, or social login providers for the services covered by this policy.

Data may be processed by infrastructure and communications services that are necessary to run OFR, such as hosting, Discord for the account provisioning flow you choose to use, Apple Push Notification service, and Firebase Cloud Messaging where you enable mobile push notifications.

6. Retention

If you delete your account, your login credentials and Discord link are removed, your account is disabled, registered push-notification devices and preferences are deactivated, and your username and public profile details are replaced with anonymised values.

Competition and service records, including race results, standings, reports, penalties, privileges, and related sporting history, are retained under the anonymised username. These records are kept to protect league integrity and preserve historical results, standings, and auditability, but they are no longer attached to an active OFR login or Discord account.

Operational logs, tokens, drafts, and other technical records are retained for as long as needed to run, secure, troubleshoot, and support the services, or for longer where required to resolve disputes, enforce rules, or comply with legal obligations.

7. Cookies and local storage

The current OFR website build does not run analytics tracking or advertising tracking. It does use browser local storage so the portal can keep you signed in, remember interface choices, and reduce accidental loss of in-progress work.

8. Children

These services are not directed at children under 13, and we do not knowingly collect personal data from children under 13.

9. Your rights

Subject to applicable law, you may ask for access to your personal data, correction of inaccurate data, erasure, restriction of processing, or objection to processing. You can delete your account from the authenticated account menu on the OFR website or from Settings in the OFR mobile app. Deletion disables future login and anonymises the retained competition and service records described above. You may also contact us if you need help exercising your rights or deleting your account.

10. Changes

We may update this policy from time to time to reflect service changes, legal requirements, or operational changes. The latest published version on this site applies from its stated update date.

11. Contact

Privacy, account, and data protection enquiries can be sent to help@obcord.com.